CVE-2024-50131

In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen() returns a string length excluding the null byte. If the string length equals to the maximum buffer length, the buffer will have no space for the NULL terminating character. This commit checks this condition and returns failure for it.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-25)

CWE

CWE-120

Published

2024-11-05

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/02874ca52df2ca2423ba6122039315ed61c25972
• https://git.kernel.org/stable/c/0b6e2e22cb23105fcb171ab92f0f7516c69c8471
• https://git.kernel.org/stable/c/5e3231b352725ff4a3a0095e6035af674f2d8725
• https://git.kernel.org/stable/c/5fd942598ddeed9a212d1ff41f9f5b47bcc990a7
• https://git.kernel.org/stable/c/a14a075a14af8d622c576145455702591bdde09d

Check your stackJSON